Encryption system and method for sensitive data in web configuration system

Abstract

The invention discloses a rapid encryption system for sensitive data in a web configuration system, which is characterized in that a security login module completes user access authentication and blacklist filtering of the encryption system, and an SQL injection attack identification and sensitive data screening module performs SQL injection attack identification on SQL statements to be executed,and a user account corresponding to the identified SQL injection attack is added into a user blacklist; and the SQL injection attack identification and sensitive data screening module is also used forcarrying out sensitive data screening on SQL statements to be executed by utilizing typical fields in the SQL statements, and the ECC data encryption module is used for encrypting the screened sensitive SQL data by utilizing elliptic curve password coding. According to the invention, rapid data encryption of the Web system can be realized, and the system performance is improved.

Description

technical field [0001] The invention relates to the technical field of smart grids, in particular to a system and method for encrypting sensitive data in a web configuration system. Background technique [0002] The customer-side energy consumption control system in the smart grid serves as the link between customers and the smart energy service platform. It is an important means to support the customer-side ubiquitous power Internet of Things, and it is also the execution unit for implementing various comprehensive energy services such as demand response and energy efficiency improvement. The client-side energy consumption control system has a wide variety of application scenarios, insufficient understanding of common requirements such as data collection and monitoring, and demand response, high development costs, and poor portability and reusability. Utilize the WEB-based configurable development platform system and application environment to provide users with the standar...

AI Technical Summary

Problems solved by technology

The energy consumption control system in the smart grid carries a large amount of sensitive data. However, the WEB-based application program usually does not strictly filter the legality of the data input by the user on the client side, so that the attacker can add additional SQL to the original query statement ( Structured Query Language, Structured QueryLanguage) statements to achieve illegal operations, trick the database server to perform unauthorized queries and other operations

Images